-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| io.github.skylot:jadx-plugins-api | maven | <= 1.4.4 | 1.4.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from Swing's default HTML rendering behavior in components like JLabel. The advisory explicitly references Guideline 3-7/INJECT-7 from Oracle's secure coding guidelines, which mandates disabling HTML rendering via the 'html.disable' property. The absence of this mitigation in Jadx's GUI components (evidenced by the CVE description and the 1.4.5 patch notes adding this protection) directly enables the DoS attack. While the exact file paths aren't provided in the references, the pattern matches Swing component initialization in GUI file handling modules.
JavaJavaOngoing coverage of React2Shell